$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: QylXnQW+R55EFkfxDuRRJz8xErlWSMSG8I7M5sl8ejY= Subject key identifier: 38:69:89:69:5C:67:F7:D6:F2:00:00:DA:A1:32:6E:D4:0E:26:D2:01 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 027725EC8314F4DD99FD123662B3C5E4B3918906 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 09:32:56 +0000 Manifest this update: Wed 23 Sep 2026 09:27:56 +0000 Manifest next update: Thu 24 Sep 2026 11:32:56 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 2: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: /iPyx/jPA75lQWV4YVArVrWG3/ARppIv1WRRGmNhOOY=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:77:25:ec:83:14:f4:dd:99:fd:12:36:62:b3:c5:e4:b3:91:89:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Sep 23 09:27:56 2026 GMT Not After : Sep 24 11:32:56 2026 GMT Subject: CN=386989695C67F7D6F20000DAA1326ED40E26D201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:79:04:2f:8a:67:a7:3b:61:bb:5d:18:da: 53:21:03:af:5c:85:53:5d:fd:1f:bd:47:5d:0f:a3: 89:aa:58:b8:de:e5:b7:88:13:06:dc:d2:b4:ae:1e: 92:e9:59:0b:2e:0e:9e:eb:5e:46:c6:ba:ae:db:1f: b1:fc:fc:01:88:af:59:53:da:5c:fb:ff:01:02:d0: 68:1e:55:07:32:80:9e:6d:0a:65:c3:d0:d2:78:fc: ae:b3:57:2d:17:69:dc:01:21:20:3e:f0:35:46:fa: 14:50:52:2f:d6:74:82:72:cc:06:66:ce:73:21:56: cc:e3:5a:95:27:27:d7:64:be:55:ee:00:77:70:2d: 07:c0:bb:66:01:7a:36:ea:43:c5:e7:47:34:13:63: f4:6e:a4:d7:61:79:a1:3f:07:a2:c5:38:76:18:d5: 17:25:cf:ff:f4:cd:a9:f9:c1:39:1e:47:56:a7:27: b6:23:15:f9:53:44:06:5c:2c:4f:3b:09:8c:ba:18: 48:7d:fd:99:3a:a8:84:2c:f0:89:d7:b0:f5:d7:88: 04:da:45:58:95:c0:5b:46:43:c8:22:7b:a4:99:b0: ad:b0:90:46:91:88:40:0b:cc:54:d9:ca:ce:10:1c: a0:4f:f2:d0:18:d9:b0:c6:e8:9e:11:45:01:21:ba: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:89:69:5C:67:F7:D6:F2:00:00:DA:A1:32:6E:D4:0E:26:D2:01 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2d:57:e6:66:d4:56:9a:3a:2a:62:0f:2f:f3:f1:24:f5:42: 90:0c:f5:c4:2a:d1:a8:ac:3d:27:92:55:5f:57:f9:15:cf:75: 62:28:e3:9c:95:9c:bb:7b:de:36:8e:ad:cf:ab:94:36:ff:21: 98:03:2e:11:7b:51:14:1d:e6:b7:d6:f5:53:0b:72:eb:37:cc: fe:51:cf:68:6f:dc:c7:61:4c:e5:54:92:55:1b:e4:03:19:c2: 11:bb:a9:2f:e5:fe:d4:1d:12:5e:ac:86:b1:2c:d4:0f:2b:96: 4c:70:01:3c:83:4c:44:ef:1d:3d:8e:cb:e9:69:6f:62:74:4e: 7a:96:ab:68:ce:df:92:a3:ea:f5:67:eb:b9:a4:cd:04:fa:5f: d3:74:79:40:7a:fe:fe:9c:9e:97:d6:0e:54:cd:d8:7b:c3:5d: 7b:59:2f:33:eb:a9:4d:fb:2d:c6:06:a2:0b:1a:34:ad:28:80: 75:f1:47:b8:de:0d:e5:17:a4:e3:de:95:bd:ff:d7:71:73:6b: ca:fb:91:17:a4:96:c2:ad:60:de:2c:51:57:a8:93:f7:f7:6d: 4f:de:09:26:64:4b:90:1a:13:44:2a:fd:bb:dd:85:86:59:c5: aa:7a:7e:c2:1f:bf:52:52:78:a0:71:1e:3c:df:f0:c7:d7:3a: 0c:c0:61:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAncl7IMU9N2Z/RI2YrPF5LORiQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA5MjMwOTI3NTZaFw0yNjA5MjQxMTMyNTZaMDMxMTAvBgNV BAMTKDM4Njk4OTY5NUM2N0Y3RDZGMjAwMDBEQUExMzI2RUQ0MEUyNkQyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaHkEL4pnpzthu10Y2lMhA69c hVNd/R+9R10Po4mqWLje5beIEwbc0rSuHpLpWQsuDp7rXkbGuq7bH7H8/AGIr1lT 2lz7/wEC0GgeVQcygJ5tCmXD0NJ4/K6zVy0XadwBISA+8DVG+hRQUi/WdIJyzAZm znMhVszjWpUnJ9dkvlXuAHdwLQfAu2YBejbqQ8XnRzQTY/RupNdheaE/B6LFOHYY 1Rclz//0zan5wTkeR1anJ7YjFflTRAZcLE87CYy6GEh9/Zk6qIQs8InXsPXXiATa RViVwFtGQ8gie6SZsK2wkEaRiEALzFTZys4QHKBP8tAY2bDG6J4RRQEhumclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOGmJaVxn99byAADaoTJu1A4m0gEwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQtV+Zm1FaaOipiDy/z8ST1QpAM9cQq0ais PSeSVV9X+RXPdWIo45yVnLt73jaOrc+rlDb/IZgDLhF7URQd5rfW9VMLcus3zP5R z2hv3MdhTOVUklUb5AMZwhG7qS/l/tQdEl6shrEs1A8rlkxwATyDTETvHT2Oy+lp b2J0TnqWq2jO35Kj6vVn67mkzQT6X9N0eUB6/v6cnpfWDlTN2HvDXXtZLzPrqU37 LcYGogsaNK0ogHXxR7jeDeUXpOPelb3/13Fza8r7kReklsKtYN4sUVeok/f3bU/e CSZkS5AaE0Qq/bvdhYZZxap6fsIfv1JSeKBxHjzf8MfXOgzAYSQ= -----END CERTIFICATE-----Generated at Wed Sep 23 19:48:55 2026 by rpki-client